Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa
File:                     34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa (raw, json)
Hash identifier:          otaYD80AipTCatXsqgPzIw01Sj0yS2QXvqvQ/Lz/LV4=
Subject key identifier:   83:F3:B8:C6:43:65:1E:6E:AD:8E:18:93:11:A7:D5:04:CE:A3:60:06
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       0AF829651FDF3D19474EB5F554B1766FF1FCA4C4
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa
Signing time:             Mon 04 May 2026 18:45:12 +0000
ROA not before:           Mon 04 May 2026 18:40:12 +0000
ROA not after:            Mon 03 May 2027 18:45:12 +0000
asID:                     268252
IP address blocks:        45.236.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f8:29:65:1f:df:3d:19:47:4e:b5:f5:54:b1:76:6f:f1:fc:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: May  4 18:40:12 2026 GMT
            Not After : May  3 18:45:12 2027 GMT
        Subject: CN=83F3B8C643651E6EAD8E189311A7D504CEA36006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:48:64:f1:9d:eb:ee:79:bf:2b:35:bd:14:
                    3d:a1:ac:db:91:2a:71:99:de:e1:27:55:39:ef:a9:
                    8c:8a:68:f1:dc:18:51:07:b0:54:2d:77:32:5e:00:
                    71:3c:bc:c5:51:93:81:9a:ef:ec:fa:34:c0:9c:df:
                    fe:e8:df:09:a8:dd:72:79:22:2f:c0:89:68:f1:81:
                    9e:7e:4b:c5:78:a2:c8:96:fa:81:18:1f:70:c5:1c:
                    4d:98:b0:ee:9b:f7:3c:ee:32:41:94:14:12:9c:ac:
                    ed:48:87:32:e5:a8:6e:dc:b3:77:5a:1e:cf:6d:b6:
                    a6:af:1c:16:a9:3b:39:8e:6d:62:33:73:84:6a:fa:
                    c9:10:77:8d:59:6f:60:9d:62:ce:f2:1f:86:09:4e:
                    e2:af:a8:5d:ca:7d:db:fb:5c:93:f4:97:f0:2e:2a:
                    da:90:f3:0c:ce:27:89:98:e8:6a:68:f6:c7:49:ab:
                    1f:b9:fe:d9:6b:ee:e7:0a:50:ad:7f:62:d8:3b:ba:
                    fb:5b:0f:bc:0a:e5:b4:a6:ed:34:83:ec:2a:cc:e5:
                    13:9e:c0:9e:7c:ef:32:82:cd:bf:1f:1b:6c:a5:74:
                    4a:02:21:bf:e1:3c:26:28:d2:30:62:fe:85:f8:cb:
                    59:0a:6e:93:83:bf:1c:23:13:47:8c:2f:c3:fa:ac:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:B8:C6:43:65:1E:6E:AD:8E:18:93:11:A7:D5:04:CE:A3:60:06
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32332d3233203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:42:cf:29:42:ee:80:7a:dc:50:8e:29:c0:85:a5:d3:5a:
         c9:bc:d8:bc:09:c8:36:08:d8:a8:7b:d4:45:7a:8d:95:e5:84:
         17:53:32:0f:49:33:ad:48:9e:b7:ad:9d:29:48:1f:21:92:dd:
         68:08:5a:e4:b8:76:a5:7f:c4:ea:92:0e:34:52:f5:19:e6:b4:
         70:d0:df:75:71:e6:fe:39:72:d8:a8:e5:0c:d1:27:12:9e:4c:
         81:62:c4:73:0b:b7:2b:d8:f5:d6:88:91:85:fe:23:bb:40:5b:
         ba:e6:a7:b0:98:69:05:b3:10:70:44:bb:8c:d2:47:ba:0b:fc:
         57:bf:00:3d:9d:92:8f:be:91:03:2b:40:19:df:17:69:08:13:
         7b:02:6f:8c:a4:88:a9:32:d0:a2:6f:89:e8:8e:ba:ea:03:8a:
         ff:6a:b4:5e:88:d5:6a:43:50:03:60:d6:0b:f3:33:61:05:39:
         69:d6:8d:d6:1e:1a:14:d3:9e:3f:dd:31:06:5f:d4:08:8f:f1:
         4f:e8:be:10:c0:c4:b2:68:b7:84:de:2a:64:ec:6b:7d:08:07:
         7b:3f:de:62:d5:91:dd:18:6d:ed:75:7a:2d:b7:db:78:ba:fa:
         22:03:da:2d:2f:57:26:f1:2a:f2:92:da:be:48:42:b0:47:37:
         b1:f2:f6:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCvgpZR/fPRlHTrX1VLF2b/H8pMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzOTVBNTQ1RDAwMDhDN0Y0Q0IwMzRERDlEOTBDREM0
MUQ5NUFFNDAeFw0yNjA1MDQxODQwMTJaFw0yNzA1MDMxODQ1MTJaMDMxMTAvBgNV
BAMTKDgzRjNCOEM2NDM2NTFFNkVBRDhFMTg5MzExQTdENTA0Q0VBMzYwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+0hk8Z3r7nm/KzW9FD2hrNuR
KnGZ3uEnVTnvqYyKaPHcGFEHsFQtdzJeAHE8vMVRk4Ga7+z6NMCc3/7o3wmo3XJ5
Ii/AiWjxgZ5+S8V4osiW+oEYH3DFHE2YsO6b9zzuMkGUFBKcrO1IhzLlqG7cs3da
Hs9ttqavHBapOzmObWIzc4Rq+skQd41Zb2CdYs7yH4YJTuKvqF3Kfdv7XJP0l/Au
KtqQ8wzOJ4mY6Gpo9sdJqx+5/tlr7ucKUK1/Ytg7uvtbD7wK5bSm7TSD7CrM5ROe
wJ587zKCzb8fG2yldEoCIb/hPCYo0jBi/oX4y1kKbpODvxwjE0eML8P6rMi7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg/O4xkNlHm6tjhiTEafVBM6jYAYwHwYDVR0j
BBgwFoAUVDlaVF0ACMf0ywNN2dkM3EHZWuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1BDVlMzdkVmWHVxRkNSNmEyR0h6WVNwOVVYWllUWUdGSjhVTmJjdkxU
SnYvMC81NDM5NUE1NDVEMDAwOEM3RjRDQjAzNEREOUQ5MENEQzQxRDk1QUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mzk1QTU0NUQwMDA4QzdG
NENCMDM0REQ5RDkwQ0RDNDFEOTVBRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQQ1ZTM3ZFZlh1cUZDUjZhMkdIellTcDlVWFpZVFlHRko4VU5iY3ZMVEp2LzAv
MzQzNTJlMzIzMzM2MmUzMjM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7PwwDQYJKoZIhvcNAQELBQADggEBAFTEQs8p
Qu6AetxQjinAhaXTWsm82LwJyDYI2Kh71EV6jZXlhBdTMg9JM61InretnSlIHyGS
3WgIWuS4dqV/xOqSDjRS9RnmtHDQ33Vx5v45ctio5QzRJxKeTIFixHMLtyvY9daI
kYX+I7tAW7rmp7CYaQWzEHBEu4zSR7oL/Fe/AD2dko++kQMrQBnfF2kIE3sCb4yk
iKky0KJvieiOuuoDiv9qtF6I1WpDUANg1gvzM2EFOWnWjdYeGhTTnj/dMQZf1AiP
8U/ovhDAxLJot4TeKmTsa30IB3s/3mLVkd0Ybe11ei2323i6+iID2i0vVybxKvKS
2r5IQrBHN7Hy9rQ=
-----END CERTIFICATE-----
Generated at Wed May 13 16:09:20 2026 by rpki-client